CVE-2023-28815

—

CVSS 3.1

9.8 critical

EPSS

1%p72

Published

Oct 17, 2025 (Oct 17, 2025)

Modified

Jun 17, 2026

Description

Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release.

Weakness: CWE-141
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.